Title: application_password_is_api_request
Published: December 9, 2020
Last modified: August 20, 2026

---

# apply_filters( ‘application_password_is_api_request’, bool $is_api_request )

## In this article

 * [Description](https://developer.wordpress.org/reference/hooks/application_password_is_api_request/?output_format=md#description)
 * [Parameters](https://developer.wordpress.org/reference/hooks/application_password_is_api_request/?output_format=md#parameters)
 * [Source](https://developer.wordpress.org/reference/hooks/application_password_is_api_request/?output_format=md#source)
 * [Related](https://developer.wordpress.org/reference/hooks/application_password_is_api_request/?output_format=md#related)
 * [Changelog](https://developer.wordpress.org/reference/hooks/application_password_is_api_request/?output_format=md#changelog)

Filters whether this is an API request that Application Passwords can be used on.

## 󠀁[Description](https://developer.wordpress.org/reference/hooks/application_password_is_api_request/?output_format=md#description)󠁿

By default, Application Passwords is available for the REST API and XML-RPC.

## 󠀁[Parameters](https://developer.wordpress.org/reference/hooks/application_password_is_api_request/?output_format=md#parameters)󠁿

 `$is_api_request`bool

If this is an acceptable API request.

## 󠀁[Source](https://developer.wordpress.org/reference/hooks/application_password_is_api_request/?output_format=md#source)󠁿

    ```php
    $is_api_request = apply_filters( 'application_password_is_api_request', $is_api_request );
    ```

[View all references](https://developer.wordpress.org/reference/files/wp-includes/user.php/)
[View on Trac](https://core.trac.wordpress.org/browser/tags/7.1/src/wp-includes/user.php#L398)
[View on GitHub](https://github.com/WordPress/wordpress-develop/blob/7.1/src/wp-includes/user.php#L398-L398)

## 󠀁[Related](https://developer.wordpress.org/reference/hooks/application_password_is_api_request/?output_format=md#related)󠁿

| Used by | Description | 
| [wp_authenticate_application_password()](https://developer.wordpress.org/reference/functions/wp_authenticate_application_password/)`wp-includes/user.php` |

Authenticates the user using an application password.

  |

## 󠀁[Changelog](https://developer.wordpress.org/reference/hooks/application_password_is_api_request/?output_format=md#changelog)󠁿

| Version | Description | 
| [5.6.0](https://developer.wordpress.org/reference/since/5.6.0/) | Introduced. |

## User Contributed Notes

You must [log in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fround-lake.dustinice.workers.dev%3A443%2Fhttps%2Fdeveloper.wordpress.org%2Freference%2Fhooks%2Fapplication_password_is_api_request%2F)
before being able to contribute a note or feedback.